CVE-2026-101055
MediumCVSS 5.3Summary
A security flaw has been discovered in Thinkware U3000 up to 1.02.04 in the GET_STATUS function of the TCP Service component. Manipulating the wifi_info argument results in information disclosure, and the attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Risk Assessment
An attacker can remotely access information that should be protected, potentially facilitating further attacks. The vendor was contacted but did not respond.
Recommendation
Restrict network access to the TCP service of the Thinkware U3000 device and consider updating when the vendor provides a fix. Monitor for unusual requests to the GET_STATUS function.
Other vulnerabilities in Thinkware U3000
See all- CVE-2026-101054Medium
A vulnerability was identified in Thinkware U3000 up to 1.02.04 in the get_file function of /tmp/wpa_supplicant.conf in the TCP Service component. The manipulation leads to improper access controls, and remote exploitation is possible. The exploit is publicly available and might be used.
- CVE-2026-101053High
A vulnerability was determined in Thinkware U3000 up to 1.02.04 affecting the PUT_FILE function in /tmp/wpa_supplicant.conf of the TCP Service component. Manipulation of the path argument can lead to improper access controls.
Original NVD description (English source)
A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GET_STATUS of the component TCP Service. The manipulation of the argument wifi_info results in information disclosure. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS